Outt
Sett
Behavioral task
behavioral1
Sample
b049949021000173791b4b7cb4a8a0e3_JaffaCakes118.dll
Resource
win7-20240729-en
Target
b049949021000173791b4b7cb4a8a0e3_JaffaCakes118
Size
70KB
MD5
b049949021000173791b4b7cb4a8a0e3
SHA1
0546e9955fe1d82070ce532e0775c474c505bd87
SHA256
d1a141e5831d5116d3a6abc1866b6b9a5786b723316442aa3902fe3d3a947cbf
SHA512
5c8b905caa0988b51d1ad39213f0fa910693be9874d22f3f0e99d5aa9fcb4ba657b1a24ea2a1ba77f206dbe928cf5c815796908c58c2b8c12a205a38a7d1e4a2
SSDEEP
1536:1zExMwCGQ2jgdQikmHeAM8N+ilsvwgu4CGvxCnbf7b4:1I+wCGv8dQiwA3gQiu4Cd7b4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b049949021000173791b4b7cb4a8a0e3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ